Data protection and data security for our contractual partners as well as for consumers have a high priority for our company. Therefore, the protection of your personal data during our entire business processes is also very important to us and a special concern. Respecting this personal right is a matter of course for us. In general, it is not necessary for you to provide personal data in order to use our website. However, in order to be able to provide our services, we may need your personal data. In doing so, we collect, process and use personal data to the extent that this is legally permissible and necessary for processing or you have consented to it.
2. Name und Kontaktdaten des für die Verarbeitung Verantwortlichen sowie des betrieblichen Datenschutzbeauftragten
E-Mail: [email protected]
3. Purposes of data processing, legal basis and legitimate interests pursued by VALU-X GmbH as well as categories of personal data and categories of recipients
Accessing our website
When you access our website, the browser used on your end device automatically sends information to the server of our website and temporarily stores it in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until it is automatically deleted:
- The IP address of the requesting internet-capable device.
- The date and time of access
- The name and URL of the file accessed
- The website/application from which the access was made (referrer URL)
- The browser you use and, if applicable, the operating system of your Internet-enabled computer as well as the name of your access provider.
- The IP address of your terminal device and the other data listed above are used by us for the following purposes:
- Ensuring a smooth connection setup,
- Ensuring a comfortable use of our website,
- evaluating system security and stability.
The data is stored for a period of 28 days and then automatically deleted. Furthermore, we use so-called cookies and tracking tools for our website. The exact procedures involved and how your data is used for this purpose are explained in more detail in Chapter 7.
3.2 Data processing when using contact forms for interested companies Contact forms as part of marketing campaigns
Personal data is collected, processed and used by us to the extent necessary to process your request and to transfer it to our CRM systems. The data processing serves the purpose of establishing contact and initiating a contract. The processing is based on Art. 6 (1) lit. b DSGVO.
3.3 Data processing of media contacts
Personal data is collected, processed and used by us insofar as this is necessary to provide the information published by our company or to contact you as requested. We also use your data to inform you about company news by e-mail or telephone, for example to send out press releases. When we contact you, we are guided by the relevance of our message and the thematic focus of your journalistic work.
3.4 Data processing of applicant data (e.g. when using our application form or at career fairs etc.)
We collect, process and use personal data to the extent necessary to process your application and to contact you. We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.
3.5 Data processing for advertising purposes and market and opinion research
3.5.1 Advertising purposes of VALU-X
Insofar as you have concluded a contract with us or we have you as an interested party, we process your address data and criteria for advertising selection on the basis of Art. 6 (1) (a) and (f) of the DS-GVO in order to send you such information and offers from us and other companies. The newsletter may be sent by means of a shipping service provider. If you do not wish this, you can object to the use of your data for advertising purposes at any time.
3.5.2 Data use for market and opinion research
We also process your data for market and opinion research. We use this exclusively anonymously for statistical purposes and only for VALU-X. Your answers in surveys are not passed on to third parties or published. We do not store the answers from our surveys together with your e-mail address or other personal data. You can object to the use of data for market and opinion research at any time, either in full or for specific measures, without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details below (e.g. e-mail, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey e-mail.
3.5.3 Right to object
You can object to the use of your personal data for advertising purposes at any time, either in total or for individual measures, without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to VALU-X GmbH, Kemmannsweg 13, 45219 Essen, Germany, or to [email protected] is sufficient for this purpose. If you object, the contact address concerned will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection. Thank you for your understanding.
4. Legal basis
VALU-X processes personal data on the basis of the provisions of the General Data Protection Regulation (also with the help of service providers). The processing is carried out on the basis of consents pursuant to Art. 6 (1) (a) DS-GVO as well as on the basis of Art. 6 (1) (b) as well as (f) DS-GVO, insofar as the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures, or insofar as the processing is necessary for the protection of the legitimate interests of the controller or a third party and the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, are not overridden. Processing operations carried out by VALU-X in the context of a legal obligation concerning it are carried out on the basis of Art. 6 (1) c) DS-GVO. On the basis of Art. 6 (1) (f) DS-GVO, we process your address data and advertising selection criteria in order to send you such information and offers from us and other companies. If you do not wish this, you can object to the use of your data for advertising purposes with us at any time. Consents can be revoked at any time vis-à-vis VALU-X. This also applies to consents that were already given before the DS-GVO came into force. The revocation of consent does not affect the lawfulness of the personal data processed until the revocation.
5. Categories of personal data
5.1 In the context of online enquiries from data subjects, we process the data required for this purpose. This includes the following categories:
Personal data, for example surname, first name, date of birth, place of birth, address as well as communication data and identification data.
5.2 In the context of data processing when using the contact forms for interested companies and contact forms in the context of marketing campaigns, we process the data required for this purpose. This includes the following categories:
- Personal master data (title, first name, last name, address, function holder status in the company, company master data)
- Communication data
- Usage data
- Marketing data (e.g. consent)
5.3 Within the scope of applicant management, we process the following data:
- Personal master data (surname, first name, address)
- Communication data
- Other data from the application documents (e.g. enrolment certificates, references, details of marital status, etc.).
In the context of media contacts, we process the following data:
- Personal master data (surname, first name)
- Company data (medium, address)
- Communication data (e-mail address, telephone, department, position)
6. Categories of recipients of personal data
Any information you provide to us by entering it on these web pages will be stored on a server located in a country in the European Union (“EU”) and will be passed on to the relevant departments within the company to process your enquiries and requests. Service providers used by us may also receive data from us to fulfil the prescribed purposes. These may, for example, be companies in the categories of IT services, printing services, marketing, sales or telecommunications.
7. Online presence and website optimization
7.1 Tracking tools and cookies – general information
7.2 Cookie consent
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs cookie does not process any personal data. The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent. Hier können Sie Cookies einsehen und Einstellungen verwalten.
7.3 Google services
In order to improve the user experience on our website, this website uses various Google services, whose parent company Google LLC (“Google”) is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For users in the European Economic Area, data responsibility lies with Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). In the event of the transfer of personal data of our contractual partner to the parent company, Google LLC has committed to the EU standard contractual clauses, which ensures compliance with the level of data protection applicable in the EU. Further information is available here: https://business.safety.google/gdpr/.
- Google Tag Manager The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behaviour, to set up remarketing or retargeting as well as targeting and to test and optimise websites. For more information on Google Tag Manager, see https://www.google.com/intl/de/tagmanager/use-policy.html.
8. Duration of data storage
We generally only store your data for as long as is necessary for the respective purpose of the data processing (e.g. processing your request or legal retention periods). We store the data collected for the processing of the contract until the expiry of the legal or possible contractual warranty and guarantee rights. After the expiry of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years from the conclusion of the contract), the data is processed again solely in the event of an audit by the tax authorities. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is necessary for the advertising approach. In addition, we follow the principle of deleting data for advertising purposes after 4 years after the end of the contract or after 4 years after the end of the marketing efforts. Advertising objections are not deleted. We store the data we process as part of the recruitment process for up to 6 months after the end of the application process. In particularly justified cases, we also store data for longer periods, for example if a public authority requires this or if the data is needed for legal reasons, e.g. to provide evidence in a court case.
9. Recipients outside the EU
If we use service providers outside the EU or the European Economic Area (EEA), we take appropriate and suitable safeguards in accordance with Art. 44 ff DS-GVO (e.g. conclusion of EU standard contracts, additional technical and organisational measures such as encryption or anonymisation) to ensure a sufficient level of data protection when transferring personal data. Please note that despite careful selection and commitment of a service provider, the service provider may process data outside the EU or the EEA or may be subject to a different legal system due to its registered office and thus may not offer an adequate level of data protection. For an efficient and reliable newsletter and ordering process, we commission an external service provider with the processing: https://www.mailgun.com/ (Mailgun Technologies, Inc., a Delaware corporation) By subscribing to our newsletter, you agree that we may transfer your data to this service provider in accordance with Art. 28 DS-GVO. The transmitted data is limited to your name, first name and email address. When an order is placed, the following data is transmitted to the external service provider: Name and first name, address, telephone number, email address, if applicable for direct debit payment option: IBAN. This service provider undertakes to comply with the DS-GVO, more information can be found under https://www.1blu.de/datenschutz/ and https://www.cloudflare.com/privacypolicy/
10. Your rights
In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:
- Right to information about your personal data stored by us pursuant to Art. 15 EU-DSGVO,
- Right to correct inaccurate data or to complete correct data in accordance with Art. 16 EU-DSGVO,
- Right to have your data stored by us deleted in accordance with Art. 17 EU-DSGVO,
- Right to restriction of the processing of your data according to Art. 18 EU-DSGVO,
- Right to data portability according to Art. 20 EU-DSGVO.
You can address your respective concerns in writing to VALU-X GmbH, Kemmannsweg 13, 45219 Essen, Germany, or by e-mail to [email protected]. In addition, you have the option of contacting the supervisory authority responsible for VALU-X, the State Commissioner for Data Protection of the State of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.
10.2 Right of objection
Under the conditions of Art. 21 (1) DS-GVO, the processing of data may be objected to for reasons arising from the particular situation of the data subject. The objection can be made without formalities and is to be addressed to VALU-X GmbH, Kemmannsweg 13, 45219 Essen, Germany. The above general right to object applies to all processing purposes described in this privacy notice, which are processed on the basis of Article 6(1)(f) DS-GVO. Unlike the specific right of objection directed at data processing for advertising purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible danger to life or health). In addition, you have the option of contacting the supervisory authority responsible for VALU-X, the State Commissioner for Data Protection of the State of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.
11. Data security
All data transmitted by you personally will be transferred using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, for online banking. You can recognise a secure SSL connection, among other things, by the appended s at the http (i.e. https://…) in the address bar of your browser or by the lock symbol in the lower area of your browser. Status: November 2021